CVE-2016-4586

CVE-2016-4586 affects WebKit in Apple Safari prior to 9.1.2 and tvOS prior to 9.2.2. A crafted website could cause remote code execution or memory corruption. The issue is documented by Apple in security updates for Safari 9.1.2 and tvOS 9.2.2 (references include HT206905 and HT206900). Impact is...

CVE-2016-4586

WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4586

WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2015-4586

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

CVE-2015-4586

The CVE-2015-4586 entry concerns the Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL router with firmware 1.0.0.20h.HOL. A Cross-Site Request Forgery (CSRF) vulnerability in the device’s web interface can allow an attacker to hijack administrator authentication and perform actions such as creating ...

CVE-2014-4586

Multiple cross-site scripting XSS vulnerabilities in the wp-football plugin 1.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the league parameter to 1 footballclassification.php, 2 footballcriteria.php, 3 templates/templatedefaultpreview.php, or 4...

CVE-2014-4586

The CVE-2014-4586 entry refers to multiple XSS vulnerabilities in the wp-football WordPress plugin (versions 1.1 and earlier). The issues allow remote attackers to inject arbitrary web script or HTML via parameters in several scripts: league in football_classification.php, football_criteria.php, ...

openSUSE Security Update : opera (openSUSE-SU-2010:1094-1)

opera 11.00 fixes among other things several security vulnerabilities. Please refer opera's site for more information: http://www.opera.com/docs/changelogs/unix/1100/ CVE-2010-4508, CVE-2010-4579, CVE-2010-4580, CVE-2010-4581, CVE-2010-4582, CVE-2010-4583, CVE-2010-4584, CVE-2010-4585,...

CVE-2012-4586

McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file...

CVE-2012-4586

CVE-2012-4586 affects McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6, and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1. The issue: remote authenticated users can cause a file request to be processed with root privileges, bypassing intended permission checks. T...

CVE-2011-4586

CRLF injection vulnerability (HTTP header injection/response splitting) in Moodle Calendar subsystem via calendar/set.php affects Moodle 1.9.x <1.9.15, 2.0.x <2.0.6, and 2.1.x

Fedora Update for moodle FEDORA-2011-16833

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moodle FEDORA-2011-16903

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : moodle-1.9.15-1.fc15 (2011-16903)

CVE-2011-4581 CVE-2011-4582 CVE-2011-4583 CVE-2011-4584 CVE-2011-4585 CVE-2011-4586 CVE-2011-4587 CVE-2011-4588 CVE-2011-4589 CVE-2011-4590 CVE-2011-4591 CVE-2011-4592 CVE-2011-4593 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 16 : moodle-2.0.6-1.fc16 (2011-16833)

CVE-2011-4581 CVE-2011-4582 CVE-2011-4583 CVE-2011-4584 CVE-2011-4585 CVE-2011-4586 CVE-2011-4587 CVE-2011-4588 CVE-2011-4589 CVE-2011-4590 CVE-2011-4591 CVE-2011-4592 CVE-2011-4593 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

openSUSE Security Update : opera (openSUSE-SU-2010:1094-1)

opera 11.00 fixes among other things several security vulnerabilities. Please refer opera's site for more information: http://www.opera.com/docs/changelogs/unix/1100/ CVE-2010-4508, CVE-2010-4579, CVE-2010-4580, CVE-2010-4581, CVE-2010-4582, CVE-2010-4583, CVE-2010-4584, CVE-2010-4585,...

CVE-2010-4586

The CVE-2010-4586 issue concerns Opera before 11.00, where WebSockets functionality is enabled by default. The description indicates an unspecified impact and remote attack vectors, and notes a possible relation to CVE-2010-4508. Connected sources confirm that Opera 11.00 includes fixes, implying...

CVE-2009-4586

The CVE-2009-4586 entry describes multiple XSS vulnerabilities in index.html of the Wowd client prior to version 1.3.1. The root cause is improper handling of user-supplied input in the search action, allowing injection of arbitrary script or HTML via (1) sortby, (2) tags, or (3) ctx parameters. ...

CVE-2008-4586

In CVE-2008-4586, the affected product is Macrovision FLEXnet Connect 6.1, specifically the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372). The issue is an insecure method vulnerability that allows remote attackers to force the download and execution of arbitrary file...

CVE-2008-4586

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...